skills/edutrul/drupal-ai/docker-local/Gen Agent Trust Hub

docker-local

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the management of local development environments through standard Docker Compose commands such as docker compose up, exec, run, and logs. These operations are essential for the skill's primary purpose of container orchestration.
  • [PRIVILEGE_ESCALATION]: The skill includes the command sudo lsof -i :80 within its troubleshooting section. This is a legitimate use of elevated privileges in a local development context to identify and resolve port binding conflicts.
  • [CREDENTIALS_UNSAFE]: The provided templates contain default credentials (e.g., MYSQL_ROOT_PASSWORD: root). These are clearly documented as local development defaults and are accompanied by a best practice recommendation to use .env files for actual secrets and to avoid committing passwords to version control.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon local project files such as docker-compose.yml, Makefile, and .env. While this presents an attack surface for indirect prompt injection, the risk is inherent to the developer-centric nature of the skill and is mitigated by the local execution context and the absence of malicious instruction patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 09:26 PM